Login Flow

The simplified authorization code mode (implicit mode) works by appending the provision of id_token to the OAuth2 Implicit Flow. The simplified authorization code mode can return various tokens to the browser. This mode can be used in single-page applications, where tokens are managed by JavaScript and used for accessing protected resources.

# Login Flow

The overall flow of the simplified authorization code mode:

  1. The user accesses a third-party application. The third-party application initiates an authorization login request to Zhuyun IDaaS. After the user authorizes the third-party application, Zhuyun IDaaS will redirect back to the third-party application, carrying the access token (access_token) and the ID token (id_token).
  2. The third-party application verifies the signature of the id_token and parses user information from the id token.

# Development Steps

The development process for integrating with Zhuyun IDaaS platform using the OIDC simplified authorization code mode is as follows:

# Step1: Simplified Authorization Code Authentication

Click to view, Simplified Authorization Code Authentication Interface

# Step2: Parse ID Token to Obtain User Information

Click to view, Obtain User Information

# Step3: Call the userinfo Interface to Obtain User Information (Optional)

Click to view, Obtain User Information